Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.3Dataease is an open source data visualization analysis tool.EPSS 0.9%Mar 12, 2026
- High8.2Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another.EPSS 0.5%Mar 12, 2026
- High8.4Tina is a headless content management system.EPSS 0.2%Mar 12, 2026
- Critical9.6Tina is a headless content management system.EPSS 0.7%Mar 12, 2026
- High7.4Tina is a headless content management system.EPSS 0.5%Mar 12, 2026
- Medium6.3Tina is a headless content management system.EPSS 0.4%Mar 12, 2026
- Low2.0A vulnerability was detected in projectsend up to r1945.Mar 12, 2026
- Medium5.5A weakness has been identified in OpenBMB XAgent 1.0.0.Mar 11, 2026
- High8.7ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parame…EPSS 0.7%Mar 11, 2026
- Critical9.3FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.EPSS 0.9%Mar 11, 2026
- Medium6.5OpenProject is an open-source, web-based project management software.EPSS 0.5%Mar 11, 2026
- High7.1Vociferous provides cross-platform, offline speech-to-text with local AI refinement.EPSS 0.9%Mar 11, 2026
- High8.7Coppermine Photo Gallery in versions 1.6.09 through 1.6.27 is vulnerable to path traversal.EPSS 0.7%Mar 11, 2026
- Medium6.7OpenClaw versions prior to 2026.2.17 contain a path traversal vulnerability in the $include directive resolution that allows reading arbitrary local files outside the…EPSS 0.2%Mar 11, 2026
- High8.7OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in apply_patch that allows attackers to write or delete files outside the configured worksp…EPSS 1.1%Mar 11, 2026
- Medium6.8Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to a Restric…EPSS 0.6%Mar 11, 2026
- High8.5OliveTin gives access to predefined shell commands from a web interface.EPSS 1.0%Mar 10, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal.EPSS 1.1%Mar 10, 2026
- High8.7liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%Mar 10, 2026
- High8.0MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).EPSS 1.5%Mar 10, 2026
- Medium6.5Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms.EPSS 0.4%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.EPSS 1.1%Mar 10, 2026
- High8.3Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.EPSS 0.6%Mar 10, 2026
- Low2.3Specially crafted ZIP archives can escape the intended extraction directory during Node.js download and extraction in Vaadin 14.2.0 through 14.14.0, 15.0.0 through 23.…EPSS 0.4%Mar 10, 2026
- Medium5.3This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.EPSS 0.9%Mar 10, 2026